Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 24.04 LTS: USN-6902-1 Critical: Apache HTTP Server Issue

ubuntu
Calendar Grey July 18, 2024
Dist Ubuntu Esm H88
The latest Ubuntu Security Advisory USN-6903-1 pertains to a critical vulnerability identified in the Nginx web server, disclosed on July 20, 2024.
Apache HTTP Server could be made to expose sensitive information over the network.

Summary

Apache HTTP Server could be made to expose sensitive information over the

network.

Software Description:

- apache2: Apache HTTP server

Details:

It was discovered that the Apache HTTP Server incorrectly handled certain

handlers configured via AddType. A remote attacker could possibly use this

issue to obtain source code.

Topics%20covered

Topics Covered

security advisory security issue remote attack Ubuntu Apache HTTP Server update instructions information exposure

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   apache2                         2.4.58-1ubuntu8.4

Ubuntu 22.04 LTS
   apache2                         2.4.52-1ubuntu4.12

Ubuntu 20.04 LTS
   apache2                         2.4.41-4ubuntu3.21

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6902-1

CVE-2024-40725

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6902-1

Topics%20covered

Topics Covered

security advisory security issue remote attack Ubuntu Apache HTTP Server update instructions information exposure

Package Information

https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.4
https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.12
https://launchpad.net/ubuntu/+source/apache2/2.4.41-4ubuntu3.21

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here